CVE-2024-29240 | Synology Surveillance Station prior 9.2.0-9289/9.2.0-11289 WebAPI LayoutSave authorization (SA_24_04)

CVE-2024-29240 | Synology Surveillance Station prior 9.2.0-9289/9.2.0-11289 WebAPI LayoutSave authorization (SA_24_04)

A vulnerability, which was classified as problematic, was found in Synology Surveillance Station. This affects the function LayoutSave of the component WebAPI. The manipulation leads to missing authorization. This vulnerability is uniquely identified as CVE-2024-29240. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.